CVE-2006-4364
MDaemon < 9.0.6 - Heap-Based Buffer Overflow via Long USER or APOP Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-4364. PoCs published by muts, Leon Juranic.
AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in MDaemon's pre-authentication USER command. It uses an egghunter and shellcode to achieve remote code execution, specifically a bind shell on port 4444.
Description
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands.
Exploits (2)
This exploit targets a heap overflow vulnerability in MDaemon's pre-authentication USER command. It uses an egghunter and shellcode to achieve remote code execution, specifically a bind shell on port 4444.
This exploit targets a pre-authentication heap overflow in Mdaemon POP3 by sending maliciously crafted USER commands with oversized input. It demonstrates the vulnerability by triggering a crash or potential code execution via heap corruption.